TWI269183B - Identity-based distributed computing for device resources - Google Patents

Abstract

A system, method and related structure for discovering and describing computing resources available at various computing devices, and for exposing those resources as services that are addressable by software applications. The data describing the resources is arranged according to an identity-based schema. The computing resources may include, for example, storage capacity, bandwidth, processing power, input methods and mechanism, and rendering methods. The method and system are identity-based, whereby a user (with an identity) has access to the distributed resources commensurate with that identity.

Description

1269183 IX. Description of the invention: [Technical field to which the invention pertains] This broadly relates to computer systems, and more particularly to source 0. In early personal computer systems, various calculations must be used to program the application so that the application can To use this, for printing by a specific printer, the word processing program must be printed to the printer, and generally for each supported printer maneuver program # one choice is, a printer opportunity comes with a driver Most rogue programs. The user must set up each program to connect to which printer the printer is connected to. For example, the modern operation of Microsoft Windows (Micosoft Wind〇w(g)) provides a development program that allows the application to interface with the device without having to take into account the needs and needs of the particular device driver. When using Microsoft Windows, the user or device will inform the operating system of the printer (or printer, etc.), and then the application will be able to communicate with the printer driver as a system. , Jiguo, for the application "substantially only, processing 1 by the operating system to provide the printing function. The advantage of this type of extraction is that it is not conservatively estimated that this extraction can enable any of the thousands of software programs to interact with the printer and/or other devices without the prior support. The details. Computer equipment device knowledge device. For example, how to provide a way to provide a program to the system, for example, to make the connection through the operation of the printing, standardization column, for example, with thousands of solutions (or 1269183 Microsoft's .NET technology Providing a pattern of extraction similar to that for a user or company. In general, due to the ΝΕτ technology, a program with .NET capabilities on the device can interact with the user through a centralized schema. Due to systemization, the program There is no need to have specific knowledge about the data section (for example, which is usually stored in a dedicated file format) and only need to be able to process (read and write) the material formatted according to one or more of the outlines. Due to .NET technology, the user (or The identity of other entities) controls access to maintenance-oriented data. For example, users can use NET letter to keep their email data stored centrally (such as on the Internet or intranet) and then at any time. Any device that can connect to the Internet's internal network and have a way to interact with the .NET mail service. NET mail is accessed by the service. The identity of the user is to securely match the user with the appropriate information. The user can also allow other users to access the data, for example, a user can use the other. Identity, selectively providing certain commercial contract information to business partners, providing personal contract information to friends, etc. In .NET, this provides a great data-based benefit to the messenger 'company and other entities, Centralized services and centralized data are not particularly concerned with how users use various devices and sources of such devices. For example, devices such as personal computers and pocket PCs can sometimes be directly synchronized with others. In some contexts, · NET technology is to make this data assimilated (although indirectly) without the need for a specific and dedicated synchronization program. The responsibilities are combined with the fine-funded service department or the type of control data and the use of the step 1269183. However, a user Even with .NET, it is difficult to use one device to access the resources of another device, such as the computing power of a device used by another device, Memory, bandwidth, input and output mechanisms, programs, and/or other resources, such as performing a complex or more appropriate job on a more capable device. Therefore, a general, consistent approach is needed for remote discovery. And providing computing resources of various computing devices to other resources for interactive use. SUMMARY OF THE INVENTION Briefly, the present invention discloses a computing resource for discovering and describing computing devices available for various related identity authentications, and for Systems and methods for providing such resources as services that can be addressed by a software program such that programs on the device can utilize resources of other devices. The device services are based on identity authentication, wherein device owners find each other and/or Or other device may be accessed by the user as the owner or other user. Moreover, the device owner (or manager) can control the resources of which other users and/or other devices can use each device, and to what extent. Computing resources may include, for example, the device's storage capacity, bandwidth, processing power (such as CPU and RAM capabilities), wheeling mechanisms and methods, depictions and other wheeling mechanisms and methods (eg, screens, printers, and stereos) And the program. Such a device can be extracted into its resources and then can be programmatically addressed from other devices in a group sigma manner (eg, the remote device can be made up of a smaller combination of resources contained within the larger sense of the resource) Defined). In other words, for devices incorporating the smart distributed computing model, various features of each of the participating devices 7 1269183 are extracted and other devices can be programmatically addressed. A unified identity authentication mechanism can discover a list of remote resources on the device. A set of one or more of the profiles consistently describes the remote resources on the device, and the unified security mode allows the user of the device to control which access to the resource and to what extent. Thanks to the present invention, a computing solution that is suitable for many example situations and that meets the requirements is feasible, including the immediate situation in which a group of user devices interact with one or more remote computing devices, and a group that is apparently and automatically operated by the user. Schedule or forecast. Lu other advantages, please refer to the following detailed description with reference to the accompanying drawings. [Embodiment] Representative production environment

Figure 1A illustrates an example of a suitable computing system environment 100 that enables the present invention to be implemented. The computing system environment 100 is only one example of a suitable computing environment and is not intended to limit the scope of use and functionality of the present invention. At the same time, the computing system environment 100 should not be interpreted as having a dependency or necessity for the components exemplified in the representative operating environment 100. The present invention can operate with a variety of other general purpose or special purpose computing system environments or configurations. Examples of conventional computing systems, environments, and/or configurations may be suitable for use with the present invention, including but not limited to: personal computers, server computers, handheld or laptop devices, tablet devices, multiple microprocessor systems, Video Adapter, Programmable Consumer Electronics, Network PC, Fan 8 1269183 Your computer, mainframe computer, decentralized computer environment including any of the above systems or devices and the like.

The invention may be described in the general context of computer-executable instructions (e.g., a modular module) executed by a computer. In general, a program module includes routines, programs, objects, components, data structures, etc. that perform a particular job or implement a particular extracted data pattern. The present invention can also be implemented in a distributed computing environment in which the work is performed by a remote processing device coupled via a communications network. In a distributed computing environment, the program module can be located in an area including a memory storage device and a remote computer storage medium.

Referring to Figure 1A, a representative system for implementing the present invention includes a general purpose computing device such as a computer 1 10 type. The components of the computer 110 may include, but are not limited to, a processing unit 120, a system memory 130, and a system bus 1 that couples various system components including system memory to the processing unit 120. 1. The system bus 1 1 1 can be any of several types of bus bars, including a memory bus or memory controller, a peripheral bus, and a regional bus using any bus structure. By way of example and not limitation, this architecture includes Industry Standard Architecture (IS A) bus, Micro Channel Architecture (MCA) bus, Enhanced Industry Standard Architecture (EISA) bus, Video Electronics Standards Association (VESA) regional bus, Connect to the peripheral components (P CI) bus (also known as the Mezzanine bus). Please note that any or all of the components shown in Computer 101 can be connected to each other via a standard high-speed computer network, including geographically dispersed areas. For example, system memory 130 may be located at a different location than processing unit 120, but still form a logical computer 1 10 as defined. 9 1269183 Computer 11 0 typically includes a variety of computer readable media. The computer readable medium can be any available media that can be accessed by computer 110 and includes both volatile and non-volatile, removable and non-removable media. By way of example, and not limitation,, computer-readable media includes at least computer storage media and communication media. Computer storage media, including volatile and non-volatile, removable and non-removable media, can be implemented by any method or technique for storing information such as computer readable instructions, data structures, programming levels or other data. Computer storage media includes (not limited to) RAM, ROM, EEPROM, flash memory or other memory technology, CD-R〇m, digital multi-function disc (DVD) or other disc storage, magnetic memory card! , tape, disk storage or other magnetic storage device, or any other medium that can be used to store demand information and be accessible by computer i i. Communication media typically includes computer readable instructions, data structures, program modules, or other materials within modulated data signals (such as carrier waves or other transmission mechanisms), and includes any information delivery media. "Modulating data signal," means a signal having one or more characteristics that can be set or changed to encode information in the signal. By way of example, and not limitation, communication media includes wired media (eg, Wired network or direct wiring connection) and wireless media (such as audio, RF, infrared and other wireless media). Any combination of the above is also included in the computer readable media. System memory 1 3 0 including computer storage media The type is volatile and/or non-volatile memory, such as random access memory (RAM) 丨32 and read-only memory (ROM) 1 3 1. Contains information that can be transferred between components within the computer. A basic input/rounding system 13 3 (BIOS) of the basic routine of information (such as during power-on) is usually stored in R〇M 13 1. RAM 132 usually 10 1269i83 contains the processing unit l2 standing up gr7 — ^ Access and / or currently connected to the # 贤 贤 and / or program module. For example, the above known ~ Lu (not limited), 1A District 1 - 軏 operating system 1 3 4, application 〗 With the younger brother A picture is not

35. Other program modules 136 and programs are greedy. - To A computer 110 may also include other mobile/non-shiftable, volatile/non-searching media. For example (not limited, military _ system), Figure 1A shows - read or write to an immovable, non-volatile magnetic | _ 姝脰 a hard disk drive i 4 丨, one for reading And write to a removable, non-.. saponin disk 1 5 2 disk driver 1 5 1 , and a for reading and writing to a moving, non-volatile CD 156 (such as a CD) ROM or other optical plucking, yugan media) CD driver 155. Other removable/non-removable, volatile/non-volatile computer storage media that can be used in the representative operating environment include: (not limited to) tape cartridges, flash memory cards, digital versatile discs, The digital video tape, the solid state RAM, the target r〇M and the like. The hard disk drive 141 is usually connected to the system bus i1 1 via a non-removable memory interface such as the interface 140, and the disk drive 151 The CD driver 155 is usually connected to the system bus i 2 i through a removable memory interface such as the interface 15 . The above is not the same as the driver and related computer storage in FIG. 1A. The media provides storage of computer readable instructions, data structures, program modules or other data of the computer. The hard disk drive 141 shown in FIG. 1A is, for example, a storage operating system 144 and an application 145. Other program modules 146 and program data ι47. Please note that these components can be the same or different from the operating system 1 34, the application program 135, the other program modules 136 and the program data 137. Operating system 144, application 11 1269183 program 145, other program modules 146 and program data i47 are used to demonstrate (minimum) that they are different. A user can pass commands and information via an input device (such as a graphic) The input board or electronic tablet 164, the microphone 163, the keyboard 162 and a pointing device 161 generally referred to as a mouse, a trackball or a touch pad are input to the computer 110. Other input devices not shown in Figure ia may include a rocker , game mats, versatile discs, scanners, or the like. These and other input devices are typically coupled to the processing unit 120 via a user wheeling interface 160 coupled to the system busbar 12, but may also be The interface is connected to a busbar (such as a parallel port, a game port, and a unified serial bus (USB)). A screen 191 or other type of display device can also be connected via an interface (such as a video interface 丨9〇). To the system bus 121. The screen 190 can also be integrated with a touch panel or the like. Please note that the screen and/or the touch panel can be physically coupled to a computer package. The housing of the 110 is, for example, a personal computer in the form of a tablet. In addition, a computer such as a computer device may also include other peripheral output devices connected via a peripheral output interface 1 94 or the like, such as a speaker. 1 9 5 and the lister 1 9 6. The computer 110 can operate in a networked environment that uses logic to connect to one or more remote computers (such as a remote computer 180). The remote computer 1 800 can Is a personal computer, a server, a router, a network PC, a peer device, or other shared network node, and typically includes many or all of the above components associated with the computer (although in Figure 1A only Demonstrate a memory storage device 1 8 1 ). The logical connections illustrated in Figure 1A include a regional network (LAN) 171 and a wide area network (WAN) 173, but may also include other 12 1269183 networks. This networked environment is located in the home, office, pan-enterprise computer network, internal network and the Internet. For example, in the present invention, computer system 110 may include at least a source machine from which data may be transferred, and remote computer 180 may include at least the destination machine. Note, however, that the source and destination machines do not need to be connected by a network or any other component, but that the data can be ported via any medium having capabilities that can be written by the source platform and read by the destination machine or platform.

When used in a regionally networked environment, the computer 11 is connected to the regional network 171 via a network interface or adapter 170. When used in a wide area network environment, the computer 1 1 typically includes a modem 1 72 or other means for establishing communication over the wide area network 1 7 3 (e.g., the Internet). The data engine 172 (built-in or external) is connected to the system bus 1 1 1 via a user input interface 160 or other suitable mechanism. In a networked environment, the program modules or parts thereof displayed on the personal computer may be stored in the remote memory storage device by way of example (not limitation), and Figure 1A shows the far The end application 1 8 5 resides on the memory device 181. It should be understood that the network connections shown are representative and that other components that establish a communication link between the computers can be used. Fig. 1B illustrates an example (computer device 1 8 8) that can at least partially implement another applicable operating environment of the present invention. As with Figure 1A, the operating environment in Figure 1B is merely an example of a suitable operating environment and is not intended to limit the scope of use and functionality of the present invention. Other computer devices 188 in Figure 1B typically include at least some types of computer readable media. The computer readable medium can be any available media that can be accessed by computer device 188 (large 13 1269183 is physically defined as described above).

Figure 1B shows the functional components of the computing device 188, such as a handheld (pocket size or tablet) personal digital assistant, including a processor 189, a memory 190, a display 192, and a keyboard 193 ( It can be a physical or virtual keyboard). Memory 1 90 generally includes volatile memory (such as RAM) and non-volatile memory (such as ROM, PCMCIA cards, etc.). An operating system 1 94 resides in memory 190 and executes in processor 189, such as the Windows® CE operating system sold by Microsoft®, or other operating systems. One or more applications 1 95 are loaded into memory 1 90 and executed on operating system 94. Examples of applications include email programs, scheduling programs, PIM (Personal Information Management) programs, word processing programs, spreadsheet programs, Internet browser programs, and the like. The handheld personal computer 188 may also include a notification management program 196 loaded into the memory 190, which is executed on the processor 189. The notification management program 196 manipulates, for example, a notification request from the application program 195.

The handheld personal computer 1 8 8 has a power supply 197, such as one or more batteries. The power supply 197 can further include an external power supply that can bridge or charge the built-in battery, such as an AC adapter or a power connector. The representative handheld personal computer 188 shown in Figure 1B has three external notification mechanisms: one or more light emitting diodes (LEDs) and an audio generator 199. These devices can be directly coupled to the power supply 197 so that even when the handheld personal computer processor 798 and other components are turned off due to power saving, it can be maintained for a period of time according to the instructions of the notification mechanism / 14 1269183

If you want more than one K-series, etc., it must be counted. If you want to count it, it is better to keep it. The LED 198 will continue to be maintained until the user takes action. Note that the representative audio generator 1 99 consumes the current handheld personal computer too battery power' so it is set to turn off when other systems are turned off or after a set time has elapsed. IDENTIFICATION IDENTIFICATION DISTRIBUTION STATEMENT The present invention relates generally to systems and methods that facilitate the decentralization of device resources to other devices. The present invention is generally not related to how the device resources communicate with each other, at the time of communication content or between devices. Rather, it is generally preferred that the device be considered as a means for the device to discover each other's resources, and then allow the site to share the resources. Although not the invention is required to provide protection for the decentralization of resources for practical purposes, at least to ensure that the resources of other devices are required to be used. Therefore, the present invention is preferably based on identity authentication, in which the decentralized resources are associated with each other based on the identity information (e.g., credentials) of the §. In general, the present invention relates to a decentralized program among user devices in which the user (or owner/manager) is any one of authorized devices for control and/or use. However, because the general device is gradually distributed, the method and system described above are more appropriately said to be a decentralized resource. For example, a single decentralized device can be composed of many resources, but often only one of the resources can be provided. Only clothed with its non-volatile storage) participated in the total. As used herein, the terms "device," and "resource, are generally interchangeable unless otherwise indicated, such as using other devices or using other resources to achieve a computational effort that is generally considered to be the same. Also, as used herein, as used herein, bandwidth is a device resource, even though bandwidth may not generally be considered to be associated with any particular device.

As generally depicted in FIG. 2, a distributed computing environment 200 constructed in accordance with various features of the present invention includes a first device 202 (device A, such as computer system 110 in FIG. 1A) and a second device 212. (Device B, such as computer system 188 in Figure 1B), along with other possible devices (not shown). Each of the devices participating in the distributed computing environment 200 includes a decentralized computing management program 204 and 214. In general (and as explained below), the decentralized computing management programs 204 and 214 can include at least some media (eg, wireless FM, such as infrared in-line transmission, satellite, direct connection, internet, or internal network). ) Some code that communicates with each other. There is indeed more than one such medium available for use, and the decentralized computing management programs 204 and 214 that are best suited to one or most of a particular situation may be selected.

An original purpose of the distributed computing management programs 204 and 214 is to locate each other. This positioning may be automatic, such as by having the devices frequently broadcast their availability to the other and/or polling for the availability of other devices, or may operate in response to a particular request from a program (or user) to connect To another device. As shown in FIG. 2, the decentralized computational management programs 204 and 214 each include an exchangeable certificate 2 07, 2 1 7 or the like (as obtained from an authentication service 220) security mechanisms 206 and 216, respectively. To ensure that the user of the device (and/or the device itself) that is currently in contact with it is effectively present in the distributed computing environment, and similarly, if desired, the device to be contacted must also be effective. Please note that the program in use can also be considered by the security/access control (for example, if the first program executed on one device can obtain 16 1269183 authorization to use another device's resources, but the other program does not), Not related to or in addition to the identity of the user and/or device identity. Further note that the security mechanism may operate in the form of each identity and each resource, such as authorizing an entity to use a device display rather than its storage while authorizing another entity to use any available resources of the same device, including its Storage body. This is similar to the .NET security model, in which the method of providing services controls the access to the user's data based on the identity of the requesting user, defining the role and role of the user. As such, the material is accessible by its owner and is determined by the owner to share. In the present invention, device resources are accessed in lieu of data, and the scope of a resource can be determined by the identity of a user, the defined role, and the scope of the role. It is true that the security mechanism of the present invention is based on the security/access control that is essentially used in the NET service, and is generally disclosed in U.S. Patent Application Serial No. PCT filed on January 22, 2011. /〇〇3,754 titled "Kldentity-centric Data Access", with the serial number 10/003,767 titled Authorization Requesting Entity for Data Suppression ^ SJl_ (Authorizing a requesting Entity To Operate Up〇n Data The structure of the present application is hereby incorporated by reference herein in its entirety by reference in its entirety in its entirety in the the the the the the the the In addition, the local area network consistent with the security mode can be executed on such devices, so that regional security is provided even when the second-area peer device may not be connected to the centralized (eg, pass) authentication service 220 (Fig. 2). The invention is not limited to any particular transmission medium, but is provided as a sub-section 17 1269183

The decentralized resource service can be addressed directly by the target device or via the Internet or an internal network (for example, via a centralized .NET service on the Internet). When connected via the Internet or an internal network, a program can query the most recent information about known computing resources available on any device associated with the user (even if the device is offline or inaccessible). Bandwidth is also a resource and affects how resources are shared by a device, such as when a personal computer is connected to the Internet at high speed, such as other devices having a high speed connection. In fact, a personal computer may wish to utilize a high speed connection of other devices, such that other devices may utilize the resources of the personal computer (e.g., such devices may exchange resources to provide a better user experience).

In accordance with a feature of the present invention, the distributed computing management programs 204 and 214 also each include respective discovery mechanisms 2 0 8 and 2 1 8 which provide such devices to discover shared resources/capabilities of another joining device (ie, When other devices are configured to share their resources). The respective resource data 209 and 209 will be formatted (eg XML) and exchanged according to the defined outline, as explained below. As shown in Figure 2, by exchanging the schema data 2 0 9 and 219, the two devices 202 and 024 can be configured to share their resources (RA1 to RAm and RB1 with other devices in the distributed computing environment, etc.) To RBn). However, it should be understood that in a particular environment, a particular device (e.g., a mobile phone) may be a consumer of a resource rather than a provider of any resources, or conversely a provider rather than a consumer. A device that shares its resources does not need to directly transfer resource information to other devices, but for example, may publish its resources somewhere else for discovery by other devices. For example, a .NET service (.NET device) will have a centralized storage device resource of 18 1269183, so that the data can be properly formatted before being sent to a device (eg, no high-resolution graphics can be sent to one. The device that displays it). A .NET resource service or an extended .NET device service can be used to publish this information to other devices. The following tables present examples of useful (eg, XML formatted data) exchanges for resources (storage and processing capabilities) of a user's device, including work and home PCs, and Hive phone: &lt;myStorage&gt; <device name='Work PC" uuid=”7a733d84-b394-4bal-56b5c0d&gt;&lt;driveSize/&gt;&lt;freeSpace/&gt;&lt;transferSpeed&gt;&lt;seekLatency/&gt;&lt;/device&gt; <device name=”Home PC” uuid=”6d733d84-b3f4-4bal-56b5c0f&gt;&lt;driveSize/&gt;&lt;freeSpace/&gt;&lt;transferSpeed&gt;&lt;seekLatency/&gt; 〈/device〉 〈 Device name=”Cell Phone” uuid=”5f733d84-b3f4-4bal-56b5c〇e&gt;&lt;driveSize/&gt;&lt;freeSpace/&gt;&lt;transferSpeed&gt;&lt;seekLatency/&gt; 〈/device〉 &lt;/mayStorage&gt ;

19 1269183 &lt;myProcessingPovwer&gt; <device name='Work PC" uuid=”7a733d84-b394-4bal-56b5c0d&gt;&lt;cpuSize/&gt;&lt;cpuUsage/&gt;&lt;memorySize&gt;&lt;memoryUsage/&gt; 〈/device 〉<device name=”Home PC” 皿=”6d733d84-b3f4-4bal_56b5c0£&gt;&lt;cpuSize/&gt;&lt;cpuUsage/&gt;&lt;memorySize&gt;&lt;memoryUsage/&gt;&lt;/device&gt; 〈device Name=”Cell Phone” uuid=”5f733d84-b3f4-4bal-56b5c0£&gt;&lt;cpuSize/&gt;&lt;cpuUsage/&gt;&lt;memorySize&gt;&lt;memoryUsage/&gt; 〈/device〉 &lt;/myProcessingPower&gt;

As is known, the outline is preferably resource-based, that is, a list of devices will be listed for a resource type to conform to a general concept of decentralized resources for use, and the resource exists. The actual device is irrelevant. Although the invention is not limited to any particular outline and/or format, for example, the framework may be device based so that each device can provide a list of available resources to other devices such that the same information is known. In general, as shown in Figure 3, an architecture 300 is provided to allow devices to join a smart distributed computing model in which various features of the added device are extracted and programmatically addressed by other resources. A basic plug-and-play (UPnP2.0) basic construction or the like can be used as a basic, low-level mechanism for discovering such resources. Alternatively, the resource list of various computing devices can be cached at some known location (eg, active directory storage 20 1269183) to enable remote resource queries, even if the device can only pass through some intermediate Access (such as a firewall or wireless hub). Above the discovery mechanism is a schema 3 04 (e.g., associated with each particular type of computing resource), each of which appears, for example, in the architecture. Note that although U Ρ η P provides an appropriate discovery mechanism 3 〇 4, it is only part of the process of actually using the remote computing resources. Therefore, UPnP and ΝΕΤ technology are used to assist resource sharing, but do not actually utilize the resources available on a device. Rather, once the resource is known, an appropriately centralized agreement in that particular resource domain will be used. For example, UPnP (and .net

The indentityHeader, endpointHeader, and requestHeader SOAP semantics are well-suited for obtaining video screen features of the remote device, however, RDP communication protocols are used at the outset and are used to transfer video material after the device has been handed over. . Please note that this is similar to the current method of processing data. For example, _NET provides a mechanism to connect an electronic endpoint that represents a proprietary (such as a messaging program) agreement, but once connected to the endpoint, net will allow the user. Use an existing instant messaging protocol. Other communication protocols applicable to other types of resources may also be used, such as CI j?s + for storage, which is suitable for enterprise and household storage, and allows the user's file system to be continuously extended to other storage devices without Force users to handle driver text, namespaces, and more. In summary, the present invention provides an authentication method to discover such additional resources that are available for use, but then does not need to directly handle its operation. Figure 6 is a flow diagram showing some of the general features of the present invention, beginning with a step 6 of receiving a request to use a shared resource. The request 21 1269183 may be general, such as requesting a list of resources available to a user on a device that is configured to join, or possibly requesting a particular resource (e.g., responding to a publication). For the purposes of this example, the request is considered a request for a particular resource.

Step 602 represents an evaluation of the voucher, such as a service provided by the Microsoft .NET Pass Certification Service. The request may include a voucher, or the voucher may be exchanged separately (e.g., before, during or after step 600). If the evaluation is invalid in step 602, step 6 0 2 branches to step 6 04 which represents the rejection of the request. Please note that depending on a particular environment, requests without correct credentials will be ignored and not specifically rejected.

If the evaluation is valid, a step 6 0 6 indicating the amount of resources available for the decision is performed. For example, resources such as storage may be limited because they have only a limited amount of space, and further a device may be provided to make part of the storage space available for sharing, leaving the rest for personal use. The availability of resources such as processor cycles is such that the processor cannot be used in other ways, and even so can be further limited such that another device can only occupy a certain maximum amount of unused cycles. Any resource may have a timeout value associated with it, which may further set conditions on its use, such as no more than one hour for each request to share the storage, and if no file system is detected at least every two minutes The request will be terminated. In this manner, a device can be configured to share its resources to the extent that it is controlled by its owner/administrator. Please note that the resource access can be dynamic (such as unused processor cycles can be shared), however the CPU usage is a change number and the request is visited 22 1269183

The guest device can be prioritized with other devices sharing the CPU and/or on the device. For example, when the owner of the device is not in use, the visitor user may only consume a controllable percentage of resources (such as bandwidth or processing power). Both CPU and bandwidth are examples of resources scheduled according to time constraints (e.g., cycles or bits per second) rather than non-time based resources (such as discs or memories used). As a result, scheduling mechanisms for time-based resources are generally different in nature from non-time-based resources. Please note that the location of the public information enquiry station will enable many visitors to assist in this situation. If the resources for the display monitor are not all, they are not shared, depending on whether they are being used. Therefore, although not shown in Figure 6, step 6 06 also rejects (or ignores) a request when there is no remaining amount of the requested resource available for sharing. Step 6 0 8 indicates that a response is sent back to the requesting entity, preferably providing information of the resource capability to the requesting entity as a response.

Step 6 1 0 represents allowing the requested resource to be shared and includes, for example, a data exchange between the requesting device and the shared device such that the sharing performs some related work on the requesting device. Step 6 1 2 will test if the resource is exhausted, such as time is up or no longer valid. Note that for simplification, this is shown as a loop in Figure 6, however it should be readily understood that this action can be driven by event. Further, a step (e.g., step 606) can be included in the loop/ to initiate the event, such as dynamically monitoring the resource usage to determine when resources will be exhausted for the particular request. Note that the resource will be terminated directly when the requesting entity notifies the device that the resource is no longer needed. Step 6 1 4 indicates that the requesting device is no longer available to the resource. Step 1 &lt; i _ Ice 6 1 6 does not make the resource no longer available for use, so that, for example, if it is exhausted, then the requesting device will need to make a new request if it wants to share resources again. Figures 4 and 5 provide some examples of many possible uses of the invention. As can be seen from the 4th + +, 5th figure, the integrated computing proxy server supports the user to the edge of the edge or the device to an internal network can lead to better use experience. In the first example shown in Fig. 4, a small mobile device 40 (such as a mobile phone) wishes to print to a printer 402, whereas the small device 4 0 0 does not have a suitable printer driver. Program. This may be because the mobile device 400 does not have sufficient memory to install and maintain the printer driver required for the printer 402, and/or a printer driver that does not have a convenient way to install the demand. And/or for other reasons. Please note that this is the actual situation and the suggested solution is to transmit XHTML-PRINT from the mobile device 4 through some network connection (eg via the dotted line in Figure 4) as a simplified PDL (page Describe the language) to the printer 402. Although XHTML-PRINT can be applied to a certain range, this solution has some disadvantages, such as XHTML-PRINT is not a "what you see is what you get", can not control the line break, and generally provides a poor experience. If, via the present invention, the mobile device 400 first dynamically discovers a personal computer 404 device equipped with a suitable printer driver 406 (and the mobile device user is authorized to use it), the mobile device 400 is provided via the personal computer 404. Printing the data to the printer driver 406, which will then use the 描述^^ page description language "(10) "by 邙" or dot matrix input to produce a view of the output of 24 1269183. As described above, the present invention provides the discovery mechanism. And then the action set 400 can communicate with the personal computer 404 in any manner, such as by a lightweight PDL with more loyalty (compared to XHTML-PRINT). By utilizing faster processing within the personal computer 404 The result is a very fast and high quality output with the appropriate printer driver 406.

Figure 5 illustrates a second example that generally provides an improved use when operating a PDA (Personal Digital Assistant) 500 to be remotely executing a management code on a server 52 (e.g., an ASP.NET server). Experience. The method of achieving this is to connect the PDA to the server to execute the management code (e.g., by utilizing the action control supported in ASP.NET), and the result is transmitted in HTML, as indicated by the dashed line in Figure 5. The server 502 dynamically scales the HTML content to match the appropriate screen size of the device 500 without requiring the ISV to generate a specific purpose code for use by each device 500. However, this need reciprocates with the device 500 (flashing the screen to wait for a new face), while generally providing a poor user experience.

The present invention provides an improved way of achieving this by substantially causing the PDA to dynamically discover a personal computer associated with the user's identity as a proxy for some of the resources, substantially as shown in FIG. In this/event, the pda 504, by a smaller amount of data, is slower; the keyway to the server 5 0 2 is transmitted via the proxy PC 504 to issue a remote messaging HTML request. The personal computer 504 intercepts the request and begins to cause the remote server 502 to unload the time period (e.g., using wSDL as the communication protocol with the server ^2). Typically, the bandwidth from the proxy PC 504 to the server 5〇2 will be less than that from the PDA device 500 to the proxy PC to enable the display of the more responsive user interface when the 25 1269183 is displayed on the PDA 500, providing an improved use. Experience. Of course, the second frequency bandwidth can be evaluated first to ensure that the proxy mode is superior.

Again, please note that the PDA 5 00 provides a better experience if it is equipped with an area to perform control that the server can utilize. For example, ASP.NET automatically takes advantage of any local control of the Windows® operating system (such as a date pick-up control) on a PDA. This results in less back and forth movements with the server 052 and/or the proxy server 504, resulting in less screen update/flicker.

It should be understood that there are many other viable examples by centering computing resources on an identity rather than on devices hosting such resources. The resource outline and service structure are not limited to describing only the resource, but may also include elements that assist in making the resources work together. This can be seen in two situations, namely a set of immediate situations (where the user interacts instantly with a remote computing device), and a set of scheduled or predicted conditions. An example of a predictive situation may include a memory load balancing mechanism that is occasionally performed on a home network to determine that the storage space of one computing device is not exhausted, while another hard disk has a lot of space. Therefore, a rich outline can provide information beyond the description of the resource itself, such as scheduling methods (at a specific time or a normal time), prioritizing methods, and pointing out how to handle immediate and predictive work or most of these tasks. Possible competition. The outline can provide a concept of cost. For example, if the two connections are available for the Internet, it is important to recognize that the user has to pay a fee for unlimited access and another fee for transmitting a 26 1269183 data through different mechanisms. Quantity, and make better choices.

Copying/sharing by a check-in system can be used to understand how the user interacts with his device and achieve a consistent view of how the user operates, rather than having only a different perspective separated by the device. This information is appropriate for many devices and will provide an automated means to incorporate this material. The storage and exchange prediction optimization can be performed according to the monitored usage. For example, when the system knows that a user manually downloads specific information to a handheld computer before leaving the work every Friday, the system can start the download when the device is idle. So that the "synchronization" seems to be instantaneous. The choice/setting/hobby of the end user is also valuable information for the shared environment, such as the need for certain users to meet the needs or even the necessary characteristics that are not in line with the needs or even boring. By maintaining this information, the end user will have the ability to control their experience. In addition, in a typical environment, at least one rich customer will use the protocol/scenario for system management, where “system” refers to all resources related to an identity. Algorithms and methods can be used to predict this operation.

It should be understood that many valuable situations can be made possible by extracting device resources and aggregating them in one identity. The present invention will be provided with some examples, but the list should not be construed as being exhaustive or limited in any way, but only as part of the many advantages and advantages of the invention. As in the above example, a device with a small screen can utilize a non-use computer screen connected to a personal computer for better display, using a proxy resource to facilitate a better display on its own display (Figure 5) ), or can be printed by a printer even without a printer driver, by connecting to a printer via a PC with the correct driver (Fig. 4 27 1269183).

Others, such as a very low-power device (such as a mobile phone), perform complex calculations by using the memory of a person's computer and the CPU. When the first hard disk is about to be full, the stored data is automatically and explicitly moved from a first hard disk to a second hard disk, including, for example, a personal digital video recorder programmed from a recorded video, and Old programs need to be deleted to make room for Kinki records. The present invention is not deleted, but the old programs are moved and stored separately. A portable walkman does not need to be able to play any type of physical media, but can receive it from a personal computer and store the audio data in the buffer memory and then play it from the memory.

Other examples include allowing users to easily access their files from any device, regardless of where they are stored; for example, when having only a small personal computer on the road, it can be easily opened for storage on a home PC or work user. A file on a computer (not related to centralized .NET data storage). A user can see various devices (including various common sharing points in the corporate network). A large screen television connected to the appropriate device can be used to view pictures stored on a personal computer folder, perform a slide show, view a home movie or movie track stored on a personal computer, and the like. Figure 7 provides an illustration of an implementation 700 using four interconnected computing systems (702 through 705). The implementation 700 includes a command shell program 710 and an application 712 (or similar functional code) on the computing system 704, a keyboard resource 7 1 4 on the computing system 702, and a computing system 703. A storage medium (e.g., a disc) 716, and a display 7 8 on the computing system 705. Thus, in this example the resource will be decentralized such that there is an input resource on the computer 702 at 28 1269183, a storage resource on the computer 703, and an output resource on the computer 704. The computer 704 serves as the coordinating supervisor of the embodiment 7. Although the resources are spread across different computer systems, the resources are accessed in accordance with the present invention to substantially form a single functional system. The shell program 710 calls the application 712 and is connected to resources of other devices via connection bees 724, 726 and 728, which is conceptually illustrated in FIG. 7 as a connection per resource (although inputs and outputs may be provided separately) Connection 埠). Essentially, the port contains at least a structured column that can be written to (output) or read (input) from the port via a process. The linkage is maneuverable (data is not lost) and the security can be linked to a connection so that no one other than the entity that sees the material is visible. The housing program 7 1 0 in the embodiment 700 is based on a stylized language called xSpresso, as described in U.S. Provisional Patent Application Serial No. 60/3, 7, 9, 8, 64, filed on May 10, 2002. The disclosures (hereby incorporated by reference). In general, X s p r e s s is a stylized language and execution time for operational control and data flow between components of a non-synchronized system. XSpresso expresses the common space between programs and services that can be programmatically verified, including order and timing. The language can be used to programmatically express an organizational outline formed by a specially identifiable markup authentication language such as XML. In the example of Figure 7, the numerical arrows labeled 1 through 4 and 6 through 10 indicate the communication between ports 724, 726 and 728 and the housing program 71 to place the files in the storage 76. The textual material is displayed on display 718, as is similar to the conventional "type" function. In the example of Figure 7, the user of the keyboard resource 714 initiates the operation by typing the word "type" on the keyboard 714 (arrow designation (1)) 29 1269183. The shell program 710 receives this via the port 724 and transmits the data to the port 728 for display on the screen 718 (arrow icon (2)), in response to the user inputting and/or prompting to store the user wishing to display. The file name or file of the text. In Fig. 7, the arrow indicating (3) indicates that the user has entered the name (e.g., corresponding to an XML file), which can also be responded (not separately displayed).

By the file name, the shell program 710 then writes the data (indicated by the arrow labeled (3)) to the port 726 corresponding to the storage (eg, disc) resource 716, which results in the A read request from the file system of the storage. At the same time, the shell program 710 will call (the wide arrow indicating the arrow (5)) the application 712 to receive and output the read data. The storage resource 7 1 6 begins to output data via the connection 72 6 to the application 7 12 in response, and then outputs it to the port 728 of the display resource 71 8 as indicated by the arrows labeled (6) and (7). The arrows labeled (8) and (9) indicate the rest of the information transmitted in a similar manner. The arrow labeled (10) indicates the status (e.g., success) code of the return housing program 710.

Consistent with the present invention, the storage, input and output can be placed on different systems without changing the embodiment. Inheritance operability can be provided via a Common Language Execution Time (CLR) level that represents common inheritance components such as keyboards, consoles, and banks. System diversity is provided in a region and in a distinctly decentralized implementation, as is the apparent manipulation of consistency and information transfer. As apparent from the above detailed description, the present invention provides a method and system for decentralized calculation of device resources centered on an identity authentication concept. The system and method extracts a computer resource from an individual 30 1269183 device in a manner that provides a number of benefits to the user and substantially improves the user's computational experience. The method and system are in an outline and derivable and highly flexible. While the invention is susceptible to various modifications and alternatives, the specific embodiments of the invention are shown in the drawings. However, it is understood that the invention is not intended to be limited to the particular forms disclosed. Rather, the invention is to cover all modifications, alternatives, and equivalents.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1A generally shows a block diagram of a computer system that can be incorporated in the present invention, and FIG. 1B generally shows a block diagram of another computer system that can be incorporated in the present invention; A block diagram of various components of a distributed computer environment; FIG. 3 is a block diagram generally showing an architecture for discovering and exchanging resource information in accordance with a feature of the present invention;

4 and 5 are diagrams showing how a circle of user experience can be improved by distributing computer operations to resources in accordance with a feature of the present invention, and FIG. 6 is diagrammatically implemented in accordance with a feature of the present invention to facilitate A block diagram of representative logic and associated operations for sharing resources in a decentralized computer environment; FIG. 7 is a block diagram generally showing a 31 1269183 embodiment including resource dispersion in accordance with a feature of the present invention. [Simplified description of component symbol] 100 Computer environment 1 10 120 Processing unit 121 130 System memory 13 1 132 Random access memory 133 134 Operating system 135 136 Other program modules 137 140 Interface 141 144 Operating system 145 146 Other programming Group 147 150 Interface 151 152 Disk 155 156 Disc 160 161 Pointing device 162 163 Microphone 164 170 Network interface 171 172 Data machine 173 180 Remote computer 181 182 Graphic interface 184 185 Remote application 186 188 Computer device 189 190 Memory 192 Computer System Bus I/O Memory I/O System Application Data ® Hard Disk Driver Application Data Disk Driver CD Driver User Input Interface Keyboard Graphics Tablet Area Network · Wide Area Network Memory Storage Device Graphics Processing Unit Video Memory Processor Display 32 Keyboard 194 Operating System Application 196 Notification Management Program Power Supply Receiver 198 Light Emitter Audio Generator 200 Computing Environment First Device 204 Management Program Security Mechanism 207 Credential Discovery Mechanism 209 Resource Data Management Program 216 Security Mechanism Credential 218 Discovery Mechanism Resource Data 220 Authentication Service Low Level Mechanism 304 Outline Program Mobile Phone 402 Printer PC 406 Driver PDA 502 Calendar PC 702 Computing System Computing System 704 Computing System 糸 710 Shell Program Application 714 Keyboard. Storage 718 Display Connection 埠 埠 Connection 埠 Connection 埠

33

Claims (1)

1269183 X. Patent application scope: - 1. A distributed computing method for identity authentication in a computing environment, which is used to facilitate computing resources of a device accessed by other devices, the method comprising: at least: discovering at a first computing device a computing device, wherein the first computing device obtains information relating to the second computing device, the data comprising resource information of the second computing device formatted according to a schema understood by the first computing device; The first computing device intercepts the data to access a resource of the second computing device; and Φ the first computing device performs a computing operation, including accessing a resource of the second computing device to perform the computing operation At least part. 2. The method of claim 1, further comprising: transmitting a request to use the resource from the first device to the second device. 3. The method of claim 1 or 2, further comprising: transmitting identity authentication information from the first device to the second device. 4. The method of claim 3, wherein the identity information corresponds to the voucher. 5. The method of claim 4, wherein the documents are provided by an authentication service. 34 1269183 6. A computer readable medium having computer executable instructions for performing a method for facilitating access to computing resources of a device by other means, the method comprising: at a first computing device: positioning related Resource information of at least one other device available for use, the location of the information being based on an identity associated with the first computing device; selecting a resource of a second device from the information; and performing a computing operation, including accessing The resource of the second computing device to perform at least a portion of the computing operation. . 7. A computing system distributed computing system for facilitating access to computing resources of a device by other devices, the system comprising: at least: a first computing device associated with at least one identity, the first computing device comprising a first resource, and configured to access the resource by at least one other device related to the identity, the first computing device providing information related to the first resource according to a resource profile related to the at least one identity; At a second computing device, the second computing device is configured to request access to the resource; and the second computing device performs a computing operation comprising using the first resource at the first computing device to perform at least a portion The calculation works. 8. The system of claim 7, wherein the resource comprises at least 35 1269183 containing storage. 9. The system of claim 7, wherein the resource comprises at least a bandwidth of the connection from the first device to the at least one other computing device. 10. The system of claim 7, wherein the resource comprises at least a processing loop of a processor. The system of claim 7, wherein the resource includes at least one input method. 1 2. The system of claim 7, wherein the resource comprises at least one output method. The system of any one of claims 7 to 12, further comprising a third computing device coupled to the first computing device, wherein the second device accesses the second The resource performs an operation in conjunction with the third computing device. 1. The system of claim 13 wherein the third computing device comprises at least one printer, and wherein the first resource corresponds to one of the printer drivers on the first computing device Program. The system of claim 13 wherein the third computing device comprises at least one server, and wherein the first computing device acts as a proxy for the server of the second computing device . 1. The system of claim 15 wherein the bandwidth from the second computing device to the first computing device is greater than the bandwidth from the first computing device to the third computing device . A computer readable medium for a method according to any one of claims 1 to 5, wherein the computer readable medium stores a resource information exchange data structure adapted to provide a second The resource information of the device is sent to a first computing device. The resource information exchange data structure includes at least: • a first field for identifying a type of resource; and a second device for identifying a device, the device includes a resource corresponding to the type of resource identified in the first field; A set of at least one third block, each third block in the group corresponding to the identity authentication information for identifying the device resource identified by the first field. The computer readable medium of claim 17, wherein the first barrier comprises information corresponding to a stored resource type. The computer readable medium of claim 18, wherein the third field group includes information corresponding to all size data of the storage resource. The computer readable medium of claim 18 or claim 9, wherein the third field group includes information corresponding to the blank space information of the storage resource. The computer readable medium of claim 17, wherein the first field includes information corresponding to the bandwidth data. 22. The computer readable medium of claim 17, wherein the first barrier comprises a processing capability. The computer readable medium of claim 22, wherein the third field group includes information corresponding to the processor speed data. 24. The computer readable medium of claim 22, wherein the third barrier group includes information corresponding to a processor usage data: 2 5. If the patent application scope is 22 or 23 The computer readable medium, wherein the third field group includes information corresponding to a memory size data. The computer readable medium of claim 25, wherein the third field group includes information corresponding to a memory usage data. 27. The computer readable medium of claim 17, wherein the second location comprises information identifying the device as a personal computer. The computer readable medium of claim 17, wherein the second field includes information identifying that the device is a disc driver. 2. The computer readable medium of claim 17, wherein the second location comprises information identifying the device as a telephone. 39 1269183 VII. Designated representative map: (1) The representative representative of the case is: Figure 2. (B), the representative symbol of the representative figure is a simple description: 200 computing environment 2 04 management program 207 voucher 209 resource data 2 1 4 management program 2 1 8 discovery mechanism 202 first device 206 security mechanism 208 discovery mechanism 212 second device 2 1 6 Security Mechanism 220 Certification Services 8. If there is a chemical formula in this case, please reveal the chemical formula that best shows the characteristics of the invention: 4